Integer Wraparound Vulnerability in Driftregion iso14229 Product

CVE-2026-111282

What is CVE-2026-111282?

The iso14229 software before version 0.10.1 is affected by an integer wraparound vulnerability in the Handle_0x38_RequestFileTransfer function. This issue allows unauthenticated attackers to bypass the file path length checks, enabling crafted short requests to manipulate file path length inputs. As a result, it can lead to callbacks that read beyond the allocated buffer, potentially resulting in application crashes or unintended disclosure of sensitive memory contents.

References